From: Full-round impossible differential attack on shadow block cipher
Rounds | The input difference | The output difference | Time (s) |
---|---|---|---|
1 | 0x80000000 | 0x80000000 | 0.054 |
2 | 0x80000000 | 0x80000000 | 0.081 |
3 | 0x80000000 | 0x80000000 | 0.217 |
4 | 0x80000000 | 0x40000000 | 1.009 |
5 | 0x80000000 | 0x80000000 | 1.134 |
6 | 0x80000000 | 0x40000000 | 6.556 |
7 | 0x80000000 | 0x80000000 | 8.988 |
8 | 0x80000000 | 0x40000000 | 52.288 |
9 | 0x80000000 | 0x80000000 | 73.417 |
10 | 0x80000000 | 0x40000000 | 362.931 |
11 | 0x80000000 | 0x80000000 | 579.507 |
12 | 0x80000000 | 0x40000000 | 2836.981 |
13 | 0x80000000 | 0x80000000 | 4084.869 |
14 | 0x80000000 | 0x40000000 | 22812.789 |
15 | 0x80000000 | 0x80000000 | 28649.212 |
16 | 0x80000000 | 0x40000000 | 150813.247 |